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(57) Abstract: A master controller (28) in a control area network system in a larger control area network ( 1 6, 1 8) may have a plurality 
of devices (33) coupled thereto. The devices generate data which the master controller directs to a destination device coupled to the 
same master controller, a different master controller in the same control area network or to a different master controller in a different 
control area network. The master controller directs the data using a connections table acquired from one or more other master 
controllers to which the master controller may communicate with. 
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METHOD AND SYSTEM FOR MASTER TO MASTER 
COMMUNICATION IN CONTROL SYSTEMS 

RELATED APPLICATIONS 

This patent application is related to co-pending U.S. applications entitled METHOD AND 
SYSTEM FOR OPERATING VIRTUAL DEVICES BY MASTER CONTROLLERS IN A CONTROL 
SYSTEM, Serial No. 09/328,921, filed June 9, 1999; and METHOD FOR DYNAMICALLY 
5 UPDATING MASTER CONTROLLERS IN A CONTROL SYSTEM, Serial No. 09/328,885, filed June 
9, 1999. 

TECHNICAL FIELD OF THE INVENTION 

This invention relates generally to control systems and more particularly to a method and system 
10 for communicating data between master controllers in control area networks. 

BACKGROUND OF THE INVENTION 

Through the use of a control system, various equipment or appliances in an environment, 
such as a home or business, can be computer-controlled to form an automated environment. The 

15 controlled equipment may include heating, ventilation and air conditioning (HVAC) systems, 
lighting systems, audio-visual systems, telecommunications systems, security systems, 
surveillance systems, and fire protection systems, for example. The equipment may be coupled 
to equipment controlling devices that are linked to a computer-based master controller through 
the use of a control area network. One or more user interface devices, such as a touch panel, may 

20 also be linked to the control area network to accept user input and display current system status. 
Traditional control systems typically have no or limited support for interconnecting 
multiple master controllers and supporting communications between multiple master controllers. 
The limited support traditionally available limited the ability of a user to distribute and partition 
control systems and associated devices across logical and geographic boundaries. 
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FIGURE 3 is a detailed block diagram of a virtual device according to an embodiment of 
the teachings of the present invention; 

FIGURE 4 is a flow chart showing a method for routing data between a plurality of the 
master controllers according to an embodiment of the teachings of the present invention; 
5 FIGURE 5 is a flowchart showing a method for operating virtual elements by a master 

controller in a control area network according to an embodiment of the teachings of the present 
invention; and 

FIGURE 6 is a flowchart showing a method for dynamically updating a master controller 
in a control area network according to an embodiment of the teachings of the present invention. 

10 

DETAILED DESCRIPTION OF THE INVENTION 

Control area networks may be used to replace the typical discrete systems used to control 
items in a home or business. Traditionally, items such as light fixtures and VCRs have been 
separately and manually controlled by light switches and individual remote controls. The present 

15 invention replaces such traditional systems with integrated, electronic control area networks to 
control items in a home or business. 

FIGURE 1 is a block diagram showing an exemplary configuration of control area 
networks utilizing the present invention. A distributed control area network configuration 1 0, in 
the disclosed embodiment, includes a first control area network 16 and a second control area 

20 network 1 8. In another embodiment of the present invention, first and second control area 

networks 16 and 18 form a single control area network. First control area network 16 includes a 
plurality of control area network systems 21, 23, and 26 ("CAN systems"). 

Each CAN system 21, 23, and 26 includes a master controller 28 (respectively, 28 A, 28B 
and 28C) which are described in more detail in association with FIGURE 2. Master controller 28 

25 refer to a generic master controller, while 28A-C refer to specific master controllers. In one 

embodiment, one master controller defines one CAN system. Stated another way, there exists a 
one-to-one correspondence between CAN systems and master controllers. Each CAN system 21, 
23 and 26 further has associated therewith a system identifier 27. System identifier 27 is used to 
uniquely identify each CAN system in a particular control area network. The system identifier 
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communicate with one or more associated external devices 34 controlled by device 33. Devices 
33 used to control associated external devices 34 may include infrared emitters, light switches, 
touch pads, and direct connections to associated external devices 34. For example, associated 
external devices 34 may include VCRs, TVs, stereo systems, infrared remote controllers, and 
5 lights. 

Each master controller 28 may be coupled to one or more other master controllers 28 by 
an intramaster link 36A, 36B and 36C. For example, master controller 28A is coupled to master 
controller 28B by intramaster link 36A. Intramaster links 36A-C may be Ethernet links, 
AXLinks links, LONTalk links, Wide Area Network links, Local Area Network links, FTP links, 

10 Internet links, fiberoptic links, and other suitable combinations of electrical, physical and logical 
communication systems. Intramaster links 36A-C may be used to couple one master controller 
28A to another master controller or controllers 28B-C that exist in the same or different control 
area networks (such as 16 and 18) or between different CAN systems (such as 21, 23 and 26). In 
the disclosed embodiment, intramaster link 36C couples first control area network 16 to second 

15 control area network 1 8 over the Internet 43, while other intramaster links 36A-B couple master 
controllers 28A-C within a single control area network 16. 

Second control area network 18 includes at least one CAN system 38 and a master 
controller 28D. Second control area network 18 may be configured similarly to first control area 
network 1 6 or in any other suitable way and is shown in one embodiment with exemplary master 

20 controller 28D. Continuing the previous example, CAN system 38 may represent a security 
service for home protection. The security service may remotely control the various devices in 
the home in order to provide increased security when a home owner is out of town. More 
specifically, a home owner sets the alarm clock in the bedroom to awaken the home owner for a 
business trip. Master controller 3 (28C) then commands master controller 1 (28A) to activate the 

25 TV and set the TV channel to the morning news. After a predetermined delay, such as the 

amount of time normally spent in the shower by the home owner, master controller 3 (28C) will 
send a further command to master controller 2 (28B) and request that the lights in the kitchen be 
turned on so that the homeowner can prepare breakfast. After breakfast the homeowner activates 
the security alarm using the security alarm panel in the living room and leaves the house. In 
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input channels and 255 output channels associated with each port 35, but device 33 may specify 
a different number of channels. Also, each channel may be in either an on or an off state, or may 
represent a single binary value, for example, high or low. and 0 or 1, respectively. The channels 
may be used as flags to represent various information about device 33. In the disclosed 
5 embodiment, device 33 will inform device manager 51 of the number of channels supported by 
each port 35 on that device 33 when device 33 is activated, reset or turned on. Device 33 may 
also inform device manager 5 1 at a different time or change the number of supported channels 
dynamically. 

The level information maintained by device manager 51 may be used to specify a value 

10 within a range of allowed values associated with each port 35, as opposed to the channel 

information which tracks binary value information. In the disclosed embodiment, device 33 will 
inform device manager 51 of the number of levels supported by each port 35 on that device 33 
when device 33 is activated, reset, or turned on. Device 33 may also inform device manager 51 
at a different time or change the number of supported levels dynamically. 

15 The string information maintained by device manager 5 1 for each device includes a string 

length and a string data type or types supported by device 33. The string information is used to 
perform conversions between supported string data types of different devices 33. For example, if 
a device that utilizes 8-bit character values to represent strings needs to communicate with a 
device that uses 1 6-bit character values to represent strings, the string information can be used by 

20 device manager 5 1 to convert between the different string formats of the devices. 

Command information maintained by device manager 5 1 for each device includes a 
command length and a command data type or types supported by device 33 and may be used to 
perform conversions between command data types as necessary. For example, if a device that 
supports only 8-bit data for commands needs to communicate with a device that supports 

25 commands using 16-bit data, the command information can be used by device manager 51 to 
convert between the supported command types so that the devices may communicate. 

The maintenance information associated with device 33 may include a device type 
identifier, a serial number, a firmware ID, and a version string. If necessary, multiple sets of 
maintenance information may be maintained for a single given device 33. For example, a device 
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intrusion and tampering from external, unauthorized users connected to the Internet 43 while 
providing Internet communications functionality to master controller 28B. 

Message dispatcher 56 is coupled to connection manager 53 and receives data from 
connection manager 53. Message dispatcher 56 is further coupled to a plurality of modules 77 
5 which include a diagnostics manager 78, device manager 51, a configuration manager 86, and an 
IP port manager 88. In one embodiment, modules 77 may also include an FTP server 83 and an 
HTTP server 81 which may not be coupled to message dispatcher 56. 

Message dispatcher 56 operates to route data received from connection manager 53 and 
other modules 77 to appropriate modules 77. Message dispatcher 56 dispatches the data from 
10 connection manager 53 and other modules 77, such as diagnostics manager 78, configuration 86, 
and IP port manager 88, based on the content of the data, the dispatching information from 
connection manager 53 and modules 77, and other suitable criteria. 

Diagnostics manager 78 operates to monitor the operational status of devices 33. 
Diagnostics manager 78 may examine specific diagnostic data generated by devices 33 in 
15 response to diagnostic commands sent to devices 33 and may also examine error messages 
independently generated by devices 33 and modules 77. 

TCP/IP stack 79 is coupled to the HTTP server 81 and the FTP server 83, and provides 
TCP/IP based protocol and communication services to master controller 28, HTTP server 81 and 
FTP server 83. 

20 HTTP server 81 provides Hypertext Transport Protocol (HTTP) services to master 

controller 28. HTTP server 81 may be used to receive and respond to commands generated by a 
user at a remote location, such as a user using web browser 48 (FIGURE 1) to control first or 
second control area networks 16 and 18. HTTP server 81 processes the commands through a 
CGI engine 91 . CGI engine 91 operates to interpret CGI scripts which define behavior and 

25 handling instructions for commands received over the Internet 43 by HTTP server 8 1 . CGI 

engine 91 provides services which may include security and remote control services appropriate 
to the control area network (such as 16 and 1 8), master controllers 28A-D and devices 33. CGI 
engine 91 is further coupled to device manager 51 and manipulates devices 33 through device 
manager 5 1 . 
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files, such as other version and identification information that may be associated with other 
elements of master controller 28. For example, device manager 5 1 and connection manager 53 
may include version identifiers which could be used in selecting the appropriate files. The 
selected files may be used to update both software and firmware, either individually or in 

5 combination, on master controller 28. For example, firmware 57 could be updated, as well as 
software such as device manager 51, interpreter 93, and connection manager 53. Other elements 
of master controller 28 could also be updated. 

Firmware 57 provides required suitable functionality at a hardware level to master 
controller 28. In the disclosed embodiment, firmware 57 controls the operations and interactions 

10 of interfaces 63, 67, 71 and 73. The firmware 57 may also control the operation of various other 
hardware which forms portions of master controller 28. Firmware 57 includes a firmware 
identifier 97. Firmware identifier 97 may provide identification and version information relating 
to firmware 57. Firmware identifier 97 may also serve to identify compatible upgrades, updates 
and patches that may be applied to firmware 57. Firmware identifier 97, in one embodiment, is 

1 5 an alphanumeric value, but may include any suitable representation. 

Device manager 51 is further operable to provide a plurality of virtual elements 
corresponding to physical elements associated with master controllers 28, such as devices 33, 
ports 35, levels, channels, strings, commands, and notifications. Virtual elements may include a 
plurality of input elements coupled to output elements of each linked physical element, and a 

20 plurality of output elements coupled to input elements of each linked physical element. FIGURE 
3 is a detailed block diagram of a particular virtual element, a virtual device 58. Virtual device 
58 is a logical construct in device manager 51 which may be used to unify or group the behavior 
of a plurality of physical elements. For example, the virtual device 58 may be created by issuing 
the command DEFINE JTOMBINE(VirtualDevice, PhysicalDevice, PhysicalDevice) to the 

25 device manager 5 1 . Virtual device 58 includes a plurality of input elements coupled to output 
elements of each linked physical element, and a plurality of output elements coupled to input 
elements of each linked physical element. 

Virtual device 58 may include a virtual port 61 . Virtual port 61 operates to link a 
plurality of ports 62A, 62B, 62C, 62D, 62E, and 62F having associated levels, channels, strings 
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and a further portion of the state represents the channels, strings and commands associated with 
the corresponding element. Virtual elements provide a logical link between the state of the 
virtual element and the corresponding physical element. The behavior of the physical elements 
may be maintained and updated so that the portion of the states representing the respective 

5 physical and virtual elements 1 levels are identical or substantially similar to each other. The 

portion of the state associated with the virtual element level may also be maintained and updated 
similarly to the portion of the state associated with the physical elements' levels, such that the 
portion of the virtual element's state associated with the virtual element's levels is identical or 
substantially similar to the portion of the state of the respective physical element associated with 

10 the physical element's levels. The linking between the virtual element levels and the physical 
element levels is achieved by replicating commands and propagating state changes found at the 
virtual element levels to the physical element levels, and further by replicating commands and 
propagating state changes from any one of the linked physical elements to the corresponding 
virtual element and then to the other linked physical elements. 

1 5 In contrast, the behavior of the channels, strings and commands of the physical elements 

are maintained and updated such that changes in the further portion of the state of the virtual 
element are propagated to the further portion of the states of the respective physical elements, 
while changes in the further portions of the states in the physical elements are propagated only to 
the virtual element. In other words, changes in the channels, strings and commands of the virtual 

20 element are propagated to all of the linked physical elements, but changes in the linked physical 
elements are only propagated to the virtual element. 

For example, a change in the state associated with virtual port 61 will be replicated and 
propagated through logical port representation 66A-66C to physical ports 62A, 62D, and 62F. 
Similarly, a change in the state associated with the level of physical port 62A will be propagated 

25 to virtual port 61 and then replicated by virtual port 61 and propagated to physical ports 62A and 
62F through logical port representations 66A and 66C, respectively. In contrast, a change in the 
state associated with the channels, strings and commands of physical port 62A will be 
propagated only to virtual port 61. 
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and other master controllers. The activated master controller will use this information to route 
data from devices 33 coupled to the activated master controller to destinations. These paths are 
represented by a connections table. The connections table, in order to represent each path, stores 
the master controller or master controllers through which data must pass to reach a particular 

5 master controller. For example, referring to FIGURE 1, master controller 28 A is coupled to 
master controller 28B, and master controller 28B is coupled to master controller 28C, thus, 
master controller 28A will store in the connections table a path from 28A to 28B and a path from 
28A to 28C through 28B. 

Proceeding to step 103, the activated master controller 28 A receives one or more 

1 0 connections tables from one or more of the connected 28B and other master controllers 28C-D. 
Then, at step 106, the activated master controller 28 A updates an internal connections table using 
the one or more connections tables received from the connected 28B and other master controllers 
28C-D. 

An example of steps 98-106 is presented in order to further clarify those steps. Referring 
15 to FIGURE 1, when master controller 28 A activates (step 98), it transmits a connections table 
request (step 101) to master controller 28B. Master controller 28B then sends connections tables 
representing the path from master controller 28A to master controller 28B, and the path from 
master controller 28A to master controller 28C through master controller 28B. Master controller 
28B would also include in the connections table the path from master controller 28A to master 
20 controller 28D through master controller 28B and the Internet 43. After master controller 28A 
has received the connections tables from master controller 28B (step 103), master controller 28 A 
updates its internal connections table so that if one of devices 33 coupled to master controller 
28 A needs to communicate with one of devices 33 coupled to master controller 28B-D, master 
controller 28A will know if the destination device is reachable from master controller 28A and if 
25 the destination device is reachable, which path the data should be routed over. The internal 

connections table may also include a fallback device. The fallback device is a master controller 
that master controller 28A will send data to if the destination device is unreachable. Thus, the 
fallback device comes into use when the master controller does not know how to contact the 
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Proceeding to decisional step 131, if the destination device is coupled to one of the other 
master controllers (28C-D), then the YES branch of decisional step 131 is followed and the 
method proceeds to step 133. If the destination slave device is not coupled to one of the other 
master controllers (28C-D), then the NO branch of decisional step 131 is followed to step 136. 

5 If the YES branch of decisional step 13 1 is followed, the method proceeds to step 133. In 

step 133, the data is transferred from master controller to master controller until the master 
controller having the destination device coupled thereto is reached. The data is first transferred 
from the activated master controller (28A) to the connected master controller (28B) which is the 
first master controller on the path to the master controller having the destination device coupled 

10 thereto. The connected master controller which receives the data then passes the data on to the 
next master controller on the path to the master controller having the destination device coupled 
thereto. The data continues to be passed on to further master controllers until the master 
controller having the destination device coupled thereto is reached. 

If the NO branch of decisional step 131 is followed, the method proceeds to step 136 

15 where the data is transferred to the fallback device. As described above, the fallback device 
represents a master controller that the activated master controller will transfer information to if 
the destination device is coupled to a master controller not known to the activated master 
controller (28A). Stated another way, if the activated master controller (28A) has no path in its 
internal connections table to the master controller having the destination device coupled thereto, 

20 the activated master controller (28A) will transmit the data to the fallback master controller in the 
hope that the fallback master controller will know of a path to the master controller having the 
destination device coupled thereto. 

Proceeding to decisional step 138, after the data has been transferred to the fallback 
device in step 136 the fallback master controller determines if it knows of the master controller 

25 having the destination slave device coupled thereto. If the fallback master device knows of the 
master controller having the destination slave device coupled thereto, the YES branch of 
decisional step 138 is followed and the method proceeds to step 133 to transfer the data as 
described above. If the fallback master does not know of the master controller having a 
destination slave device coupled thereto, the NO branch of decisional step 138 is followed and 
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The method proceeds to decisional step 156 where a check is made for a request to 
change the virtual device state. The virtual device state may change in response to a data state 
change request received at the virtual device 58 or to other suitable criteria. If no request to 
change the virtual device state is detected, then the NO branch of decisional step 156 is followed 
to decisional step 168. If a request to change the virtual device state is detected, then the YES 
branch of decisional step 156 is followed to step 158. 

From the YES branch of decisional step 156 the method proceeds to step 158, where the 
method updates the virtual device state in response to the request to the change the virtual device 
state. Then, at step 161, the method replicates the change in the virtual device state. In one 
embodiment of the present invention, the change in the virtual device state is replicated by 
generating a data state change request for each respective physical device 33 linked to the virtual 
device 58. Each generated data state change request is tailored to induce a change in the 
corresponding physical device state which is substantially similar to the change induced in the 
virtual device state. The induced change in the physical device may also be identical to the 
change in the virtual device. 

Next, at step 163, the method sends the generated data state change requests to respective 
devices and, at step 1 66, the respective physical device states are updated in response to the 
corresponding generated data state change requests. 

Returning to the NO branch of decisional step 156, the method proceeds to decisional 
step 168 where a check is performed for a request to change one or more of the respective 
physical device states. If no request to change one more of the physical device states is detected, 
then the NO branch of decisional step 168 is followed to step 183. If a request to change one or 
more of the physical device states is detected, then the YES branch of decisional step 168 is 
followed to step 171 where the method updates the respective physical device states. Then, at 
step 173, the change in the respective physical device state is replicated and, at step 176, sent to 
the virtual device 58. In one embodiment of the present invention, a data state change request is 
received at one or more of the respective physical devices 33 and a copy of the received data 
state change request is sent to the virtual device 58. Proceeding to step 178, the method updates 
the virtual device state in response to the copy of the data state change request from step 173. 
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FIGURE 6 is a flowchart showing a method for dynamically updating master controllers 
28 in a control area network (16 and 1 8) according to an embodiment of the teachings of the 
present invention. The method begins at step 201 where master controller 28 connects to a 
remote site. In one embodiment of the present invention, the remote site is one or more of 
5 content providers 46 and the connection to content providers 46 is created over the Internet 43 
using FTP server 83 (shown in FIGURE 1). The connection with the remote site may be 
initiated automatically by master controller 28, in response to user input or in response to any 
suitable criteria. For example, based on version identifiers associated with software or firmware, 
the master controller 28 could actively search out updates, upgrades and patches. 

1 0 Next, at step 203, the method receives or retrieves a list of files available from the remote 

site. Then, at step 206, the method selects at least one of the files in the list. The selection may 
be performed manually by the user, automatically by master controller 28 and by a combination 
of manual input and automatic selection. In particular, the selection may be based on one or 
more version identifiers and firmware identifier 97 (shown in FIGURE 2), but any other suitable 

1 5 criteria may be used. 

Version identifiers be used to identify version, age, compatibility and other information 
associated with software on master controller 28. Software may include content provider 
interfaces to provide communication services with various content providers, other user or 
retailer added software, or other suitable software. For example, a security and home protection 

20 service may load custom software onto master controller 28. The software elements may have 
respective associated identifiers that may be used by the present method or the various software 
elements may share identifiers. 

Firmware identifier 97 may be used to determine the version, age, compatibility and other 
criteria associated with firmware 57 on master controller 28. The firmware 57 may also include 

25 firmware associated with the interfaces 63, 67, 71 and 73, interpreter 93, any modules 77, 

message dispatcher 56, CGI engine 91, proxy server 76 and connection manager 53, as well as 
any other suitable part of master controller 28 which is implemented in firmware. In addition, 
the various pieces of firmware may have individual identifiers associated with them as well as 
being able to share firmware identifier 97. 
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control area networks and control area network systems which allows logical and geographic 
partitioning of devices. 

It should be recognized that direct connections disclosed herein could be altered, such 
that two disclosed components or elements would be coupled to one another through an 
intermediate device or devices without being directly connected, while still realizing the present 
invention. Other changes, substitutions and alterations are also possible without departing from 
the spirit and scope of the present invention, as defined by the following claims. 
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4. The control network according to claim 3, wherein an external device 
communicates with said port. 

5. The control network according to claim 4, wherein said port controls said external 

5 device. 

6. The control network according to claim 1, wherein said device is a slave device 
controlled by said master controller. 

1 0 7. The control network according to claim 1 , wherein said first connection manager 

includes a first connections table and said second connection manager includes a second 
connections table. 

8. The control network according to claim 7, wherein said first connections table 

1 5 includes a plurality of entries, each said entry representing a path from said first master controller 
to a remote master controller distinct from said first master controller. 

9. The control network according to claim 8, wherein said path is a sequence of at 
least two master controllers that is traversed to get from said first master controller to said remote 

20 master controller. 

10. The control network according to claim 9, wherein the sequence further includes a 
cost associated with each element in the sequence. 

25 11. The control network according to claim 9, wherein said remote master controller 

is said second master controller. 

12. The control network according to claim 9, wherein said remote master controller 
is distinct from said second master controller. 
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20. A method for routing data in a control network including a plurality of master 
controllers, a first master controller having a first set of devices coupled thereto ; and a second 
master controller having a second set of devices coupled thereto, the method comprising: 

maintaining routing information; 

generating data at a first selected one of the first set of devices; 

transmitting the data from the first selected device to the first master controller; 

receiving the data at the first master controller; 

inspecting the data at the first master controller to determine a destination device for the 

data; 

determining which of the first and second set of devices includes the destination device; 

and 

routing the data to the destination device. 

21 . The method according to claim 20, wherein inspecting the data further includes 
determining the destination based on a system identifier and a device identifier in the data. 

22. The method according to claim 20, wherein routing the data to the destination 
device includes sending the data to the destination device in the first set of devices. 

23. The method according to claim 20, wherein the destination device is in the second 
set and the first master controller is directly coupled to the second master controller and routing 
the data to the destination device includes: 

sending the data to the second controller; 
receiving the data at the second master controller; 

inspecting the data at the second master controller to determine which device in the 
second set is the destination device; and 
sending the data to the destination device. 
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29. The method according to claim 28, wherein sending the data to the second 
controller over the selected path includes: 

sending the data along the selected path to the further master controller which is directly 
coupled to the first master controller; 

determining whether the further master controller is directly coupled to the second master 
controller; and 

sending the data based on said determining whether the further master controller is 
directly coupled to the second master controller step. 

30. The method according to claim 29, wherein sending the data based on said 
determining whether the further master controller is directly coupled to the second master 
controller step includes: 

sending the data to the second master controller when the second master controller is 
directly coupled to the further master controller and otherwise sending the data to the further 
master controller which is the next further master controller along the path; and 

repeating said sending the data to the second master controller when the second master 
controller is directly coupled to the further master controller and otherwise sending the data to 
the further master controller which is the next further master controller along the path step until 
the data is sent to the second master controller. 

3 1 . The method according to claim 20, wherein said maintaining the routing data step 
includes maintaining a connections table associated with the second master controller and 
wherein the connections table includes a plurality of entries, each entry representing a path from 
the second master controller to a remote master controller distinct from the second master 
controller. 

32. The method according to claim 31, wherein the connections table further includes 
a fallback entry used by the first master controller to route data when the destination device of 
the data is unrepresented in the entries of the connections table. 
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(57) Abstract: A master controller (28) in a control area network system in a larger control area network ( 16, 1 8) may have a plurality 
of devices (33) coupled thereto. The devices generate data which the master controller directs to a destination device coupled to the 
same master controller, a different master controller in the same control area network or to a different master controller in a different 
control area network. The master controller directs the data using a connections table acquired from one or more other master 
controllers to which the master controller may communicate with. 
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